Описание

Are you looking to join a dynamic, international environment where the impact of your work is visible on a integral scale? At Extia, our motto is “First who, then what.” We put people and teamwork first to deliver high-impact solutions. As the No. 1 Great Place To Work® in France for 2024–25 and a Great Place To Work® in Europe for the seventh consecutive year, we are convinced that well-being at work drives performance. We are looking for an experienced DevSecOps & Cloud Security Engineer to lead the protection of our clients’ global cloud infrastructure and services. In this role, you will play a key part in ensuring the confidentiality, integrity, and availability of multi-cloud environments (AWS / Azure), applying a DevSecOps culture, advanced automation, and real-time incident response.

Задачи

- Design, configure, and secure cloud infrastructure (AWS / Azure) based on secure architectures and shared responsibility models.
- Monitor, detect, respond to, and mitigate security threats in real time.
- Configure and manage SIEM tools (Splunk, Microsoft Sentinel) and EDR tools (CrowdStrike, Defender for Endpoint) at an advanced level.
- Implement security controls through Infrastructure as Code (IaC with Terraform) and Policy-as-Code.
- Ensure operational stability and the automation of security policies.
- Protect container environments and apply hardening practices in Kubernetes.
- Ensure cloud infrastructure aligns with regulatory compliance frameworks (ISO 27001, NIST, CIS, GDPR).
- Work closely with development and operations teams to integrate security into the software lifecycle (DevSecOps) and support crisis management.

Требования

- 3 to 5 years of work experience in Cybersecurity or Cloud Operations,



including at least 2 years of direct DevSecOps experience.
- Degree/Master’s in Computer Science, Cybersecurity, Information Systems, or equivalent professional experience.
- Strong understanding of and hands-on experience operating and designing solutions in AWS and/or Azure.
- Proficiency in Terraform and fluency in scripting languages (Python, PowerShell, Bash, YAML, KQL, etc.).
- Demonstrable experience configuring and managing SIEM and EDR tools, and knowledge of network security principles (Firewalls, VPNs, WAFs).
- Familiarity with Docker security and Kubernetes hardening.
- Fluent English (B2+ / C1, written and spoken), essential for collaborating with international teams and stakeholders.
- Будет плюсом: Active certifications such as CISSP, CCSP, AWS Certified Security - Specialty, or Azure Security Engineer Associate (AZ-500); Knowledge of and experience integrating security tools into CI/CD pipelines (GitHub Actions, Jenkins, Ansible); Experience with CSPM (Cloud Security Posture Management) and CWPP (Cloud Workload Protection Platform) solutions

Условия

A hybrid model adapted to your project and work-life balance. A personalized training plan: we design your technical development and certification roadmap with you. Three points of contact: a Coach, a Manager, and an HR representative always by your side. A competitive benefits package: health insurance (including physiotherapy and psychology), meal vouchers, and transport. An international environment with more than 3,000 employees in Europe and Canada. A Great Place to Work culture based on closeness, transparency, and genuine support. Events, after-work gatherings, and an active community: team-building activities, charity initiatives, meetups, internal celebrations—we like to connect beyond work!

#J-18808-Ljbffr

📌 DevSecOps & cloud security engineer (Barcelona)
🏢 Extia Group
📍 Barcelona